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The invention refers to a system, apparatus and method for carrying out a SIM-based authentication of a user 
ac&essiag a WLAN, without havio^rovided yet an IP connectivity, along layer-2 encryption mechanism 

protecting the path between the ^^Jiinal Equipment and the Mobile netwcn^^ 

Therefore, the invention provide^nriethod for establishing a PPP-tunnelling for AKA dialogues between the 

terminal and an Access Controller for accessing the mobile network owning the SIM. 

The invention also provides an Access Controller (AC) comprising a Point-to-Point over Ethernet (PPPoE) serve 
for tunnelling AKA dialogues form a PPP-client installed in the terminal for the same purpose, and also comprisi 
a Traffic Router and a RADIUS-client. The AC thus including a RADIUS-client is interposed between a 
RADIUS-proxy accessed from the access points (AP) in the WLAN and the mobile network where SIM-based 
authetication is carried out. 
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